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To keep your mid-market business safe from growing Internet threats and automated attacks 


When data breaches hit the news, no 
one wants their company to be in the 
headline. The fallout of a breach or 
failed audit can devastate businesses of 
all sizes, across verticals and 
geographies. These consequences can 
include financial losses and penalties, as 
well as the loss of customer trust as 
they take their business elsewhere. 


Fortunately, Qualys offers a simple, 
cloud-based security & compliance 
solution to help you identify your cyber 
vulnerabilities, stop attacks before the 
damage occurs, and automatically 
manage your IT assets and comply with 
regulations. It’s called Qualys Express. 


Why You Need Qualys Express 


Qualys Express takes the stress out of protecting your 
business. Because Qualys runs everything for you in 
the cloud, all you need to do is launch security & 
compliance scans from your browser. Qualys does the 
rest by continuously monitoring your network, 


systems and web apps to automatically find 
vulnerabilities, pinpoint out-of-policy system 
configurations, and tell you what and how to fix these 
exposures. It’s fast, easy to use, and doesn’t require 
you to hire a team of experts to reap these benefits. 


Why Qualys? 


Affordable — No servers to buy or set up — it’s all in 
the Cloud. You get a predictable cost every year. 


Fully Automated — Scans, validates, and organizes 
findings and prioritized recommendations — including 
a separate view for business unit administrator. 


Accurate — Consistently exceeds Six Sigma 99.99966% 
accuracy. Tells you actionable and relevant data so 
you don’t waste any time. 


Easy-to-Use — No software to maintain; instant and 
secure access from any browser. 


Scalable — As your business grows, Qualys Express 
easily scales with your needs. 


Rich Integration — Full data and control APIs for 
connecting your existing systems. You get better 
intelligence by data correlation and seamless 
integration with trouble ticketing. 


Market Leader — IDC ranks Qualys #1 in Device 
Vulnerability Assessment and Gartner awards Qualys 
the highest possible rating in its MarketScope for 
Vulnerability Assessment. 


What Express Does for You 


Qualys uses the power of the cloud to simplify your IT 
security and lower the cost of compliance. It helps 
you keep track of your networks, computers and web 
applications, and accurately tells you where they’re 
vulnerable so that you can fix problems before 
attackers find you. It also automates many of the 
tedious parts of complying with regulations and laws 
such as PCI, HIPAA and FISMA. 


Express Guides You, Step by Step 


There are three especially critical elements that can 
help a mid-market business continuously manage its 
lifecycle of security & compliance. 


Asset Management. Express tells you exactly what 
IT assets are installed in your environment, how they 
are configured, and automates their management. 
Monitor and assess your servers, endpoints and web 
apps whether publicly accessible or behind your 
firewall. This includes remote and roaming assets 
(e.g. mobile), and assets located in public, private and 
hybrid clouds. Key features: 


e Discover rogue devices & web applications 
e Automatically identify, tag and organize assets 
e Dynamically select assets for scanning or reporting 


Network Security. See where you’re exposed to 
hackers, and learn how to fix. Express helps you stop 
hackers from sneaking into your systems and web 
apps — even against emerging Zero-Day attacks. 

Key features: 


e Find and track vulnerabilities in 
o Perimeter servers & devices 
o Web apps & websites 
o On-premise networks 
o Amazon EC2 networks 
e Report security trends across systems & time 
e Identify needed patches 
e Interactively view security posture throughout 
your network 
e Feed actionable security data to SIEM, GRC, ERM, 
WAF systems and more 


Compliance. Test your computers’ password 
controls and compliance policies. Key features: 


e Verify that systems implement required controls 
(such as password enforcement and information 
access policies) 

e Test system configurations against golden images 
or baseline standards such as USGCB 

e Test and submit PCI certification online 

e Check for compliance with HIPAA, SOX, GLBA, 
Basel Il, and more 

e Automate procedural questionnaires for 
employees, vendors and partners 


Web Application Security. With the built-in Web 
Application Scanning service, you can quickly search 
your web forms and apps for vulnerabilities. These 
include hackers’ favorite exploits such as SQL 
Injection, Cross-Site Scripting and Cross-Site Request 
Forgery. With Qualys Express, you'll find these 
vulnerabilities and learn how to quickly fix them. 
You’ll also protect your business reputation by 
eliminating malware snuck in by hackers, such as 
drive-by downloads inserted into blogs or comment 


pages. 


Full Suite of Integrated Solutions 


Qualys Express fully integrates all Qualys stand-alone 
services under one easy-to-use browser control 
panel. All are supported by the Qualys Cloud Platform 
to seamlessly scan and control IT security & 
compliance for all assets — whether on your 
enterprise network, in remote or mobile locations, or 
in elastic virtual environments. The suite includes: 

e CM -Continuous Monitoring 

e VM -Vulnerability Management 

e PC- Policy Compliance 

e PCI-—PCI Compliance 

e SEAL — Qualys Secure Seal 

e WAS — Web App Scanning 

e WAF — Web App Firewall 

e MD- Malware Detection 

e QS- Questionnaire Service 


Qualys Cloud Security & Compliance 


Platform 

The Qualys Cloud Platform hosts a suite of IT security 
& compliance solutions that leverage shared and 
extensible core services and a highly scalable multi- 
tenant cloud architecture. The core services include: 
e Asset Tagging & Management 

e Remediation & Workflow 

e Reporting & Dashboards 

e Big Data Correlation & Analytics Engine 

e Questionnaires & Collaboration 

e Alerts & Notifications 


Try It and See How It Works for You! 
For a free trial of Qualys Express, visit 
https://www.qualys.com/trial-express 


About Qualys 

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading 
provider of cloud security and compliance solutions 
with over 7,700 customers in more than 100 
countries, including a majority of each of the Forbes 
Global 100 and Fortune 100. The Qualys Cloud 
Platform and integrated suite of solutions help 
organizations simplify security operations and lower 
the cost of compliance by delivering critical security 
intelligence on demand and automating the full 
spectrum of auditing, compliance and protection for 
IT systems and web applications. For more 
information, please visit www.qualys.com. 


Qualys and the Qualys logo are proprietary trademarks of 
Qualys, Inc. All other products or names may be trademarks 
of their respective companies. 
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